firewall?

[vhg119]

i'm using my mandrake 7.2 box as a firewall/smbserver/ and now apache server
the problem is that i can not retrieve web pages from a non local location. from my internal network, i can surf just fine. but from my cousin's house, it says "not accepting requests". is this my firewall's fault? how do i make it so that it will allow requests from an external client?

[vhg119]

i think that my firewall script might be trying to forward the tcp/udp port 80 requests. anyone?

[Mountainman]

What firewall program (if any) are you using? Make sure that you allow external connections to port 80. I would say more if I knew more, but that would be one of the most important things.

------------------
---Muddle not in the affairs of Dragons, for thou art but a snack, and tasty with ketchup---
Http://www.geocities.com/mountainmancentral

[vhg119]

its just an ipchains script
how would the ipchains line look like if i wanted to accept port 80 requests from eth1 or anyone?

[zGoRNz]

try adding:
ipchains -A input -p tcp -d 0/0 80 -j ACCEPT

if that doesn't work post your script

------------------
Dunt Dunt Duh...
GoRN To The Rescue,
Yet Again
zGoRNz@yahoo.com
aim: GoRNToTheRescue

[vhg119]

doesnt work.. here's my rc.firewall.. kinda cheap but works for little stuff.


/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_masq_irc
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.0.0/24 -j MASQ

/sbin/ipchains -A input -p tcp -j DENY --destination-port 137:139 -i eth1
/sbin/ipchains -A input -p udp -j DENY --destination-port 137:139 -i eth1
/sbin/ipchains -A output -p tcp -j DENY --destination-port 137:139 -i eth1
/sbin/ipchains -A output -p udp -j DENY --destination-port 137:139 -i eth1

/sbin/ipchains -A input -p tcp -j DENY --destination-port 22 -i eth1
/sbin/ipchains -A input -p udp -j DENY --destination-port 22 -i eth1
/sbin/ipchains -A output -p tcp -j DENY --destination-port 22 -i eth1
/sbin/ipchains -A output -p udp -j DENY --destination-port 22 -i eth1

/sbin/ipchains -A input -p tcp -j DENY --destination-port 80 -i eth1
/sbin/ipchains -A input -p udp -j DENY --destination-port 80 -i eth1
/sbin/ipchains -A output -p tcp -j DENY --destination-port 80 -i eth1
/sbin/ipchains -A output -p udp -j DENY --destination-port 80 -i eth1

/sbin/ipchains -A input -p tcp -j DENY --destination-port 6000 -i eth1
/sbin/ipchains -A input -p udp -j DENY --destination-port 6000 -i eth1
/sbin/ipchains -A output -p tcp -j DENY --destination-port 6000 -i eth1
/sbin/ipchains -A output -p udp -j DENY --destination-port 6000 -i eth1